[Webkit-unassigned] [Bug 153710] New: [iOS] WebKit1 apps crash in ___ZN7WebCore16DiskCacheMonitorC2ERKNS_15ResourceRequestENS_9SessionIDEPK20_CFCachedURLResponse_block_invoke1

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Jan 30 09:25:39 PST 2016


https://bugs.webkit.org/show_bug.cgi?id=153710

            Bug ID: 153710
           Summary: [iOS] WebKit1 apps crash in
                    ___ZN7WebCore16DiskCacheMonitorC2ERKNS_15ResourceReque
                    stENS_9SessionIDEPK20_CFCachedURLResponse_block_invoke
                    1
    Classification: Unclassified
           Product: WebKit
           Version: Other
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ddkilzer at webkit.org
                CC: bfulgham at webkit.org, cdumez at apple.com,
                    psolanki at apple.com
        Depends on: 137495

WebKit1 apps crash in ___ZN7WebCore16DiskCacheMonitorC2ERKNS_15ResourceRequestENS_9SessionIDEPK20_CFCachedURLResponse_block_invoke1 on the main thread in iOS.

This is because ___ZN7WebCore16DiskCacheMonitorC2ERKNS_15ResourceRequestENS_9SessionIDEPK20_CFCachedURLResponse_block_invoke1 is being run on the main thread, creating a race condition where the DiskCacheMonitor object can be deleted after the CFCachedURLResponseCallBackBlock grabs its pointer to use on the WebThread.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160130/905a0fc8/attachment-0001.html>


More information about the webkit-unassigned mailing list